Security Directory

R

RádiaCZ 2025

hitradiofaktor.cz

54

Hitrádio Faktor is a regional Czech radio station offering multiple internet radio streams, podcasts, and local news content. The website serves Czech-speaking audiences interested in music and regional entertainment. The business operates under the parent company RádiaCZ and has been established since 2005, indicating a mature presence in the media sector. The site provides live streaming, playlists, contests, and a listener club to engage its audience. Technically, the website uses modern web technologies including Google Tag Manager, Facebook Pixel, and Foundation CSS framework. It is hosted under the REG-ACTIVE24 registrar and shows good mobile optimization and SEO practices. The site uses HTTPS with a good SSL configuration and includes CSRF tokens for security. However, it lacks explicit privacy and cookie policy pages, though a cookie consent mechanism is present. Security posture is solid with no visible vulnerabilities or exposed sensitive data. Tracking and analytics are implemented moderately, with Google and Facebook services used for user behavior analysis. The site lacks formal security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. Overall, the website is professional and trustworthy with good content quality and technical implementation. Strategic recommendations include adding comprehensive privacy and security policies, implementing a security.txt file, and enhancing accessibility features to improve compliance and user trust.

I

IT Děčín s.r.o.

hpdecin.cz

58

IT Děčín s.r.o. operates the e-commerce website hpdecin.cz, specializing in the retail sale of computers, notebooks, printers, multifunction devices, consumables, and software primarily focused on HP products. The company targets retail customers and businesses within the Czech Republic, positioning itself as a specialist local retailer with a broad product offering and customer advisory services. The website demonstrates a professional and consistent brand presence with clear navigation and comprehensive product categorization. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, reCAPTCHA v3, and integrates with local services such as Seznam.cz and Mapy.cz. The site is built on a CMS platform likely VirtueMart, optimized for mobile devices, and includes accessibility features at a basic level. Performance is moderate with good SEO practices and structured data enhancing search visibility. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA to protect forms. Cookie consent is managed with Google Consent Mode, indicating privacy compliance efforts. However, explicit security headers such as CSP and HSTS are not confirmed and should be implemented to strengthen security posture. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and registration details. This is a notable risk factor despite the professional appearance and trust signals on the website. Overall, the site is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include enhancing security headers, maintaining up-to-date third-party libraries, establishing a clear security policy and incident response contact, and improving accessibility compliance to further strengthen trust and security.

I

InstaGYM

instagym.sk

66

InstaGYM is a Slovak-based company specializing in organizing fitness camps both domestically and internationally. They position themselves as a market leader in this niche, combining attractive destinations with experienced trainers and verified services. Their business model focuses on both physical fitness camps and providing online services of trainers and nutrition advisors, targeting fitness enthusiasts with busy lifestyles. The website is built using modern JavaScript frameworks (Nuxt.js) and integrates several analytics and marketing tools such as Facebook Pixel, Crisp Chat, and Exponea Analytics. While the site is visually professional and mobile-optimized, SEO is limited due to the robots meta tag preventing indexing. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies or vulnerability disclosures. Overall, the site is safe, trustworthy, and professionally presented, though it would benefit from enhanced privacy compliance and SEO improvements.

P

pelicantravel.com s.r.o.

flipo.at

64

Flipo.at is an established online travel agency specializing in flight ticket bookings, hotel reservations, and car rentals primarily targeting German-speaking customers in Austria. The company, operating under pelicantravel.com s.r.o., leverages over 20 years of experience and serves more than 3 million satisfied customers, positioning itself as a trusted player in the transportation sector. The website offers a comprehensive user experience with clear navigation, multiple language and currency options, and a modern design tailored for desktop and mobile users. Technically, the site employs a modern AngularJS framework combined with various analytics and marketing tools such as Google Analytics, Facebook Pixel, New Relic, and Exponea. The infrastructure appears robust with CDN usage and good mobile optimization. However, some security best practices like explicit security headers are not visibly implemented, and no public security policy or incident response information is provided. From a security and compliance perspective, the website enforces HTTPS, provides a detailed cookie consent mechanism aligned with GDPR, and displays trust badges including IATA membership and PCI compliance. Contact information is transparent and accessible, enhancing business credibility. The absence of WHOIS data limits domain registration trust analysis but does not detract significantly from the overall legitimacy based on website content and trust signals. Overall, Flipo.at demonstrates a mature digital presence with strong business credibility and good security posture, though improvements in security transparency and WHOIS data availability could further enhance trust and compliance standing.

P

pelicantravel.com s.r.o.

flipo.de

65

Flipo.de is an established online travel agency specializing in flight ticket bookings, hotel reservations, car rentals, and gift vouchers primarily targeting German-speaking customers. The company operates under pelicantravel.com s.r.o., based in Slovakia, with over 20 years of industry experience and a customer base exceeding 3 million. The website offers a comprehensive and user-friendly platform with multilingual support and integration of various travel-related services. Technically, the site leverages modern JavaScript frameworks like AngularJS and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security headers and published incident response policies, indicating room for improvement. Overall, Flipo.de presents a professional, trustworthy, and compliant online presence with solid business credibility and good technical implementation.

P

pelicantravel.com s.r.o.

flipo.pl

59

Flipo.pl operates as an established online travel agency primarily serving the Polish market, offering affordable flight tickets, car rentals, and gift cards. The business is part of pelicantravel.com s.r.o., a Slovak company with over 20 years of experience and a customer base exceeding 3 million. The website demonstrates a professional and user-friendly design with comprehensive travel search functionalities and multiple payment options. Technically, the site leverages modern web technologies including AngularJS, Google Tag Manager, and various analytics and marketing tools, ensuring a robust digital presence. Security-wise, the site enforces HTTPS, employs security headers, and integrates cookie consent mechanisms, though it lacks a publicly available security policy or incident response contacts. The absence of WHOIS data for the domain reduces transparency but does not significantly detract from the overall trustworthiness given the strong business signals and certifications. Strategic recommendations include publishing security policies, enhancing accessibility, and maintaining vigilance on third-party scripts to further strengthen security posture.

P

pelicantravel.com s.r.o.

pelikan.hu

58

Pelikan.hu is a well-established Hungarian online travel agency specializing in affordable flight tickets, hotel bookings, car rentals, and travel insurance. With over 3 million satisfied customers and 20 years of experience, it holds a strong market position in the Hungarian travel sector. The website offers a comprehensive range of travel services with Hungarian language support and integrates multiple partner services to enhance its offerings. Technically, the site uses modern web technologies including AngularJS and integrates advanced analytics and marketing tools such as Google Analytics, Facebook Pixel, and New Relic. The platform is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR, though it lacks explicit security policy and incident response disclosures. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

C

cfweb | Agenzia di comunicazione funzionale

cfweb.it

67

cfweb is a well-established communication agency based in Calabria, Italy, specializing in web design, e-commerce, SEO, social media management, graphic design, and video production. With over 15 years of experience and a portfolio of more than 500 websites, cfweb positions itself as a trusted partner for businesses seeking to enhance their digital presence and marketing strategies. The agency targets local and regional businesses aiming to grow through functional and creative communication solutions. Technically, the website is built on WordPress using the Yootheme framework and UIkit, incorporating modern JavaScript libraries and accessibility features. The site demonstrates good SEO practices and mobile optimization. Security-wise, the site uses HTTPS and cookie consent mechanisms, though it lacks explicit security headers and a published security policy. Overall, cfweb presents a professional, trustworthy, and user-friendly digital presence with moderate tracking and advertising integrations.

P

pitcom GmbH

fachkraefte-erzgebirge.de

61

The Fachkräfteportal Erzgebirge is a regional job portal operated by pitcom GmbH, focused on connecting job seekers and employers within the Erzgebirge region of Germany. The website offers a comprehensive job search platform with filters by job type, location, industry, and employment model. It also features company profiles, news updates, and event information relevant to the local labor market. The portal targets local professionals, companies, and trainees seeking employment or recruitment services in the region. Technically, the website employs modern web technologies including JavaScript libraries such as jQuery and Select2, Bootstrap for UI components, and integrates analytics tools like Matomo and Google Analytics 4. It uses Google Tag Manager for centralized tag management and includes marketing pixels such as Facebook Pixel and Userlike chat for customer engagement. The site is served over HTTPS with good SSL configuration and basic security headers, ensuring secure data transmission. From a security and compliance perspective, the site implements a cookie consent banner consistent with GDPR requirements and provides detailed descriptions of tracking technologies used. However, explicit privacy policy and terms of service pages were not found in the provided content, which is a compliance gap. No security policy or incident response information is published. The site shows no signs of WAF blocking or content restrictions, and no vulnerabilities or exposed sensitive data were detected. Overall, Fachkräfteportal Erzgebirge presents as a professional, regionally focused job portal with solid technical infrastructure and moderate privacy compliance. To enhance trust and security posture, it should publish clear privacy and security policies, improve security headers, and provide direct contact information for data protection and incident response.

ProAlergiky.cz is a specialized e-commerce and informational portal serving individuals with allergies, asthma, and atopic eczema in the Czech Republic. It offers a wide range of specialized products such as inhalers, air purifiers, humidifiers, and allergy-friendly bedding, combined with practical advice and health-related content. The site positions itself as the largest portal of its kind in the Czech market, targeting a niche healthcare audience with a medium-sized business model focused on retail and education. Technically, the website leverages modern JavaScript frameworks like Vue.js, integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel, and operates on a custom e-commerce platform (CMTrade). The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses secure login forms with CSRF tokens, and includes several security headers, though some recommended headers like Content-Security-Policy are not explicitly detected. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service found in the provided content. WHOIS data is not publicly available, indicating privacy protection, which is common for commercial sites but slightly reduces transparency. Overall, the site is trustworthy and professionally managed but could improve privacy disclosures and security header implementations.

T

Trenčianska univerzita Alexandra Dubčeka v Trenčíne

tnuni.sk

56

Trenčianska univerzita Alexandra Dubčeka v Trenčíne (TnUAD) is a medium-sized public university in Slovakia offering higher education, research, and social care services. The website serves multiple audiences including students, applicants, employees, and the general public. It provides comprehensive information about academic programs, university news, events, and contact details. The university maintains a consistent brand presence and is affiliated with recognized academic organizations, enhancing its credibility. Technically, the website is built on TYPO3 CMS version 4.7, an older but functional content management system. It integrates modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Heap Analytics, and Zopim Live Chat. The site is moderately optimized for performance and mobile use, with good SEO practices and clear navigation. However, the CMS version is outdated, which may pose security risks. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and security hardening. No explicit security policies or incident response contacts are published, indicating room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and serves its educational mission well. Strategic improvements in security headers, CMS updates, and privacy compliance would enhance its security posture and user trust.

P

pelicantravel.com s.r.o.

pelikan.sk

58

Pelikan.sk is a well-established Slovak online travel agency specializing in affordable flight bookings, hotel reservations, car rentals, visas, and travel insurance. With over 3 million satisfied customers and 20 years of experience, it holds a strong market position in Slovakia's travel sector. The website offers a comprehensive and user-friendly platform with modern technologies and mobile app support. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

A

Amenity Hotels & Resorts

amenity.cz

55

Amenity Hotels & Resorts is a well-established Czech hospitality company specializing in nature-based vacations, wellness, and sports across multiple resort locations in the Czech Republic. The company targets families, corporate clients, and tourists seeking comfortable stays with wellness and recreational amenities. Their market position is solid as a regional hotel chain with diversified resort offerings and sister projects. Technically, the website is built on WordPress with modern plugins and SEO tools, hosted by a Czech provider, and demonstrates good digital maturity with mobile optimization and structured data. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, with extensive marketing and analytics integration. The domain age and WHOIS data support the legitimacy of the business.

G

Golfresort Monachus

golfmonachus.cz

59

Golfresort Monachus is a well-established golf and hospitality business located in the Czech Republic, offering golf courses, training, memberships, accommodation, and restaurant services. The website reflects a mature digital presence with a clear focus on golf tourism and related services. The business targets golf enthusiasts, families, and tourists seeking quality golf experiences in a natural setting. Technically, the website is built on WordPress with the Mioweb platform, utilizing modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Smartlook for user behavior insights. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent banner but lacks a visible privacy policy or terms of service pages. WHOIS data confirms the domain's legitimacy with a long registration history consistent with the business's age. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

O

Obecně prospěšná společnost Sirius, o.p.s.

sancedetem.cz

55

Šance Dětem is a well-established non-profit organization operating a comprehensive expert web portal focused on child health, family issues, and social support in the Czech Republic. The website serves parents, professionals, and caregivers by providing educational content, contact directories, podcasts, and webinars. It is positioned as the largest expert resource of its kind in the region, supported by the parent organization Obecně prospěšná společnost Sirius, o.p.s., with a domain age of over a decade reflecting its maturity and trustworthiness. Technically, the site is built on Drupal 8 with Bootstrap styling, leveraging modern web technologies and third-party services such as Google Tag Manager, Facebook Pixel, and CookieHub for analytics and compliance. The site is mobile-optimized and accessible, with good SEO practices and a moderate performance profile. Security posture is solid with HTTPS enforced and Cloudflare DNS/CDN usage, though some security headers and incident response transparency could be improved. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or questionable content detected.

G

G-up Delta s.r.o.

goopan.cz

47

Goopan, operated by G-up Delta s.r.o., is a well-established company specializing in the design and construction of low-energy and passive family homes primarily in the Czech Republic and Slovakia. The website presents a professional and comprehensive digital presence with detailed product catalogs, customer references, and multiple contact channels. The company emphasizes sustainable building technologies and offers both catalog and custom home solutions. Technically, the website employs modern web technologies including HTTPS, Google Tag Manager, Facebook Pixel, Smartlook, and reCAPTCHA v3, ensuring a secure and user-friendly experience. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. However, the absence of WHOIS data and explicit security headers slightly reduces trustworthiness. Overall, the site is secure, professional, and trustworthy with room for improvement in security transparency and domain registration clarity.

M

Morgan Stanley

morganstanley.com

78

Morgan Stanley is a globally recognized financial services firm providing wealth management, investment banking, sales & trading, research, and investment management services. The website reflects a mature digital presence with comprehensive content targeting individuals, families, institutions, and governments. The firm leverages advanced web technologies including Adobe Experience Manager, multiple analytics platforms, and robust consent management mechanisms. Security posture is strong with HTTPS enforcement and Content Security Policy implementation, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data is notable but does not detract from the overall legitimacy given the professional branding and extensive social media presence. Strategic recommendations include publishing security policies and vulnerability disclosure information to enhance transparency and trust.

C

Citigroup Inc.

citigroup.com

73

Citigroup Inc. is a leading global financial institution providing a wide range of banking, investment, and wealth management services to institutional and individual clients worldwide. The website reflects its enterprise-scale operations with comprehensive investor relations, press releases, and detailed business segment information. The technical infrastructure leverages modern web technologies including React and Adobe DTM, with strong privacy and cookie consent implementations via OneTrust. Security posture is robust, featuring HTTPS, security headers, and no visible vulnerabilities, aligned with industry best practices. Overall, the site demonstrates a mature digital presence consistent with a top-tier global bank, supporting trust and transparency for its users.

S

Startups Magazine

startupsmagazine.co.uk

61

Startups Magazine is a UK-based digital and print media company focused on providing content and resources for tech startups and entrepreneurs. The website offers articles, podcasts, events, and magazines tailored to the startup ecosystem, positioning itself as a niche media outlet with a small but professional presence. The company was founded in 2018 and maintains a consistent brand image and active social media engagement. Technically, the website is built on Drupal 8 CMS, hosted via GoDaddy, and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, HubSpot, and Apollo.io. The site is mobile-optimized and performs moderately well with good SEO and accessibility basics. Security-wise, the site uses HTTPS with good SSL configuration and some security headers but lacks published security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which could pose GDPR compliance risks. Overall, the site is trustworthy and professional but could improve privacy and security transparency.

P

Poski.com s.r.o.

poski.com

51

Poski.com s.r.o. is a Czech Republic-based technology company specializing in modern web design, e-commerce solutions, real estate software, and creative online marketing services. With over 20 years of market presence and more than 1000 successful projects, Poski.com positions itself as a trusted regional player serving businesses seeking digital growth and tailored online solutions. Their offerings include custom e-shop development, real estate CRM software, and comprehensive marketing strategies aimed at boosting client success. The website reflects a professional and well-structured digital presence with extensive client testimonials and case studies, reinforcing their credibility and market position. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Facebook Pixel, Hotjar, and other marketing and tracking tools. The site is mobile-optimized, SEO-friendly, and demonstrates good performance and accessibility standards. Cookie consent mechanisms and privacy policies are well implemented, indicating compliance with GDPR requirements. However, no explicit CMS or hosting provider information was detected. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the analysis, but recommendations include adding security headers, publishing a security policy, and establishing a vulnerability disclosure program to enhance security posture. Overall, Poski.com presents a trustworthy and professional business website with strong content quality and digital maturity. The main concern lies in the absence of WHOIS registration data, which is inconsistent with the active and established nature of the business. This discrepancy warrants further investigation but does not currently undermine the operational legitimacy of the company. Strategic recommendations focus on improving security transparency and WHOIS data consistency to strengthen trust and compliance.

M

Městská část Praha 10

praha10.cz

51

Městská část Praha 10 operates an official municipal website serving residents and visitors of the Praha 10 district in the Czech Republic. The site provides comprehensive information about local government activities, public services, events, and contact details. It serves as a key communication channel between the municipal office and the community, offering e-services such as document requests and visit reservations. The website maintains a consistent brand identity and targets a general audience including citizens, local businesses, and public service users. Technically, the website is built on ASP.NET WebForms with Telerik UI components and uses the EasyDNNnews CMS platform. It incorporates several JavaScript libraries including jQuery 1.9.1 and jQuery UI, along with third-party integrations like Google Custom Search, Facebook Pixel, Google Tag Manager, and Zendesk for customer support. The site is mobile-optimized, accessible, and performs moderately well, though some outdated libraries present potential security risks. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks some modern security headers such as Content-Security-Policy and X-Frame-Options, and uses an outdated jQuery version which could expose it to vulnerabilities. No explicit security policies or incident response contacts are published. The WHOIS data confirms the domain's legitimacy and long-standing presence since 1998, consistent with a municipal entity. Overall, the website is professional, trustworthy, and serves its purpose effectively. Strategic improvements in updating JavaScript libraries, enhancing security headers, and publishing security policies would strengthen its security posture and compliance. The site poses low risk and is suitable for general audiences.

C

Caspar de Haan

caspardehaan.nl

54

Caspar de Haan is a well-established Dutch company specializing in real estate maintenance and renovation, with a heritage spanning nine generations since 1749. The company focuses on sustainable property management and offers services tailored to property owners and real estate managers. Their market position is strong within the Netherlands, supported by a professional website and active social media presence. Technically, the website is built on WordPress, leveraging common SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Facebook Pixel. The site is hosted by Hostnet B.V., a reputable Dutch hosting provider, and employs HTTPS with DNSSEC for secure communications. Security posture is good with no critical vulnerabilities detected, but there is room for improvement in implementing additional security headers and publishing formal security policies. Privacy compliance is currently weak, lacking explicit privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security transparency.

R

Rodinné kuchyňské a designové studio HVT Interiéry

hvt.cz

48

HVT Interiéry is a Czech-based family-owned luxury kitchen and interior design studio specializing in custom German kitchens and bespoke interior solutions. Established in 1998, the company has positioned itself as a niche provider of high-quality kitchen designs, partnering with renowned German brands such as Schüller, Bora, Gaggenau, and Miele. Their website reflects a mature business with a clear focus on premium services targeted at discerning customers seeking tailored kitchen and interior design solutions. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices, and is hosted by Wedos, a reputable Czech hosting provider. The site is mobile-optimized and includes comprehensive privacy and cookie policies, demonstrating GDPR compliance. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the company.

V

Vinotéka Herink

vinoherink.cz

44

Vinotéka Herink operates the website vinoherink.cz, an established Czech e-commerce retailer specializing in wines and gourmet delicacies with over 25 years of tradition. The company offers a wide range of products including wines from various countries, gift packages, and complementary gourmet foods. The website targets mature consumers interested in quality wines and related products. Technically, the site is built on the Upgates e-commerce platform, leveraging modern web technologies and marketing tools such as Google Analytics 4, Google Tag Manager, and Facebook Pixel, all integrated with user consent mechanisms. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and standard security headers present, though no explicit security or incident response policies are published. The absence of WHOIS data for the domain is a concern for trustworthiness, but the website content and business presentation are professional and credible. Overall, the site is suitable for its business purpose with moderate risk due to missing domain registration transparency.

R

RealGeek.cz - ten největší e-shop s merchem influencerů v ČR a SR - RealGeek.cz

realgeek.cz

59

RealGeek.cz operates as the largest e-commerce platform specializing in merchandise for influencers, particularly targeting Czech and Slovak YouTubers and streamers. The website offers a variety of products such as t-shirts, hoodies, and caps, with a focus on fast delivery and customer incentives like free gifts. The platform demonstrates a moderate level of digital maturity, utilizing modern tracking and marketing technologies including Google Analytics, Facebook Pixel, and Smartlook, supported by a CDN infrastructure via Amazon Cloudfront. The site is built on PrestaShop, a popular e-commerce CMS, and shows good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and publishing explicit security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and operational indicators suggest a legitimate business. Overall, the site presents a professional and user-friendly experience with moderate risk factors primarily related to domain registration transparency.

V

VENART s.r.o.

venart.cz

45

VENART s.r.o. is a healthcare provider specializing in vascular and plastic surgery with multiple clinic locations across the Czech Republic including Prague, Ostrava, Podebrady, and Karlovy Vary. The website offers detailed contact information, clinic addresses, and online appointment booking functionality, targeting patients seeking specialized surgical care. The company maintains a professional online presence with active social media channels and clear branding. Technically, the website is built on the Webnia CMS platform and integrates modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel, all implemented with user consent mechanisms. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a cookie consent banner aligned with GDPR requirements. However, it lacks published security policies, incident response contacts, and advanced security headers, which are recommended to improve overall security posture. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, VENART's website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital front for their healthcare services. Strategic improvements in security transparency and incident response readiness would further strengthen their risk management and user trust.

M

Movisio s.r.o.

ctech.cz

70

Movisio s.r.o. is a medium-sized technology company based in Prague, Czech Republic, specializing in digital business solutions including 2D and 3D graphic solutions, interactive 3D, software development, linear constructions, and BIM. With over 20 years of experience and a team of more than 50 employees, Movisio serves corporations and large to medium-sized companies globally. The website reflects a professional and modern digital presence with clear navigation and comprehensive service offerings. Technically, the website employs a modern tech stack including Google Tag Manager, Google Analytics, Facebook Pixel, Smartlook, and Piwik/Matomo for analytics and marketing. The site is mobile optimized and performs moderately well, though accessibility features are basic. The CMS appears custom-built, and the hosting provider is not explicitly identified. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. However, it lacks visible security headers and explicit security or incident response policies. No vulnerability disclosure or security.txt files are present. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, Movisio presents a trustworthy and professional digital business front with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing security policies, and addressing WHOIS data inconsistencies to strengthen trust and compliance.

M

MERKUR GROUP

gauselmann.de

64

MERKUR GROUP is a well-established enterprise in the gaming and hospitality sector, with over 65 years of experience providing and developing slot machines, casinos, sports betting, and related services. The company targets players, industry professionals, and job seekers, positioning itself as a major player in the European gaming market with a large workforce and multiple subsidiaries. The website reflects a professional corporate presence with comprehensive content in German and English, emphasizing responsible gaming and corporate social responsibility. Technically, the site uses modern frameworks like Bootstrap and integrates analytics and consent management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is limited due to privacy protection but aligns with a legitimate enterprise. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations.

T

Tipsport

tipsport.sk

56

Tipsport.sk is a well-established Slovakian online sports betting and gambling platform operating since 2004. The website is currently protected by Cloudflare's security mechanisms including a Turnstile CAPTCHA, which blocks direct access to the main content and limits full analysis. The platform targets adult users interested in sports betting and related gambling services. The business is part of a larger group with sister and partner sites in the Czech Republic and Europe. Technically, the site uses modern tracking and advertising technologies such as Google Analytics, Facebook Pixel, and Adform, but lacks visible privacy and cookie policies in the accessible content. Security measures include Cloudflare WAF and CAPTCHA, but no explicit security headers were detected in the provided HTML snapshot.

S

SIA BT 1

bt1.lv

56

SIA BT 1 is a leading international exhibition organizer based in Latvia, specializing in trade fairs and events primarily in the Baltic region. The company offers a broad range of services including event organization, venue rental, and additional support services such as stand construction and catering. Their website reflects a professional and consistent brand presence with multilingual support and clear event information targeting businesses and professionals interested in exhibitions. Technically, the website employs a traditional tech stack with jQuery, Bootstrap, and FancyBox, integrated with Google Tag Manager and Facebook Pixel for analytics and marketing. While the site is mobile-optimized and accessible at a basic level, some outdated libraries and lack of explicit security headers indicate areas for technical improvement. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, aligning with GDPR requirements. However, the absence of a visible security policy, incident response contacts, and terms of service pages suggests gaps in comprehensive security and compliance documentation. The WHOIS data supports the legitimacy of the domain and company registration, reinforcing business credibility. Overall, the website presents a trustworthy and professional front for BT 1's business operations but would benefit from technical and security enhancements to strengthen its posture and compliance.

S

StoreField®

store-field.com

47

StoreField® is a Slovak-based startup founded in 2024 that specializes in sustainable retail solutions by providing living microgreens grown directly in local stores. Their innovative approach eliminates transport and plastic packaging, offering fresh, nutrient-rich produce to retailers and shoppers. The website reflects a modern, professional digital presence with excellent design, clear navigation, and strong branding consistency. Technically, the site leverages modern frameworks such as Livewire and Alpine.js, with good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers and DNSSEC could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

J

Kavárna

jtcafe.cz

61

J&T café is a stylish local café located in Brno, Czech Republic, offering breakfast, brunch, coffee, and event hosting services. The website presents a professional and elegant atmosphere targeting general audiences seeking a quality café experience. The business model focuses on hospitality with additional services such as meeting room rental and event hosting. The website is well-structured with clear navigation, a reservation form, and contact information, supporting good user experience and business credibility. Technically, the site uses a modern CMS (Solidpixels) and integrates multiple marketing and analytics tools including Microsoft Clarity, Facebook Pixel, and Google Tag Manager. The site is mobile optimized and performs moderately well. However, some security best practices such as security headers are missing, and no privacy policy or terms of service pages were found, which could impact compliance and user trust. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS data limits domain legitimacy verification. No signs of malware or phishing were detected. The site employs cookie consent mechanisms aligned with GDPR principles but lacks explicit privacy documentation. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security measures. Strategic improvements in privacy policy publication, security headers implementation, and WHOIS data availability would strengthen its security and compliance posture.

O

Okresní hospodářská komora v Chomutově

ohkcv.cz

8

Okresní hospodářská komora v Chomutově operates as a regional chamber of commerce providing business support and advisory services to entrepreneurs and companies in the Chomutov region of the Czech Republic. The website serves as an official portal offering information about their services and includes a Czech POINT submission point. The business model focuses on supporting local businesses with advisory and administrative services, positioning itself as a trusted regional institution. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO for search optimization and integrated with Google Analytics and Facebook Pixel for user tracking and marketing insights. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. No WHOIS data is available, which reduces transparency and trustworthiness, though the website content and social media presence support its legitimacy. Overall, the security posture is moderate but could benefit from enhanced policies and technical safeguards. The overall risk assessment suggests the site is functional and legitimate but should prioritize publishing privacy and cookie policies, improving security headers, and clarifying WHOIS information to enhance trust and compliance. Strategic recommendations include implementing security headers, establishing incident response contacts, and improving GDPR compliance mechanisms.

B

BRICKS agency

bricksagency.cz

62

BRICKS agency is a modern digital marketing agency based in Olomouc, Czech Republic, founded in 2018. The company offers comprehensive marketing solutions including web and e-shop development, social media management, PPC campaigns, SEO, branding, and print graphics. Their market position is that of a professional agency serving a diverse client base ranging from small to large enterprises. The website is well-designed, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Technically, the site is built on WordPress with modern libraries such as jQuery and Swiper.js, and integrates essential marketing and analytics tools like Google Analytics, Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The domain registration data is consistent with the business profile, enhancing trustworthiness. Overall, the website demonstrates a high level of professionalism, compliance, and technical maturity.

C

cyber_Folks S.A.

katoflix.pl

40

KATOFLIX is a Polish niche Christian Video on Demand platform offering a curated selection of faith-based films, documentaries, and series primarily targeting Christian families and individuals seeking spiritually uplifting content. The platform operates on a transactional rental model, providing access to films for limited periods. The website is professionally designed with clear navigation and categorization, supporting a positive user experience. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, and responsive design frameworks, hosted by cyber_Folks S.A., a reputable Polish hosting provider. Security posture is adequate with HTTPS enabled and basic cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy and terms of service are present but basic, with no explicit GDPR compliance statements or dedicated security policies. Overall, the domain registration and hosting align well with the business profile, indicating legitimacy and operational consistency.

C

Come and See Foundation, Inc.

thechosen.tv

61

The Chosen TV Series is a well-established non-profit media organization focused on producing and distributing a multi-season historical drama about the life of Jesus Christ. The organization operates under the Come and See Foundation, Inc., leveraging multiple digital platforms including mobile apps, streaming services, and merchandise sales to engage a broad Christian audience. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content that supports its mission and audience engagement. Technically, the site uses modern frameworks such as Next.js and integrates various analytics and advertising technologies, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the website and organization present a trustworthy and credible front with strong community and market positioning.

S

SzukajacBoga.pl - Z Bogiem możesz zmienić swoje życie na lepsze!

szukajacboga.pl

59

SzukajacBoga.pl is an established Polish online platform focused on Christian spiritual education and personal development. Founded in 2006, it offers a variety of courses, some with personal trainers, aimed at helping individuals deepen their faith and life with God. The website features user testimonials and course ratings, indicating active user engagement and trust. Technically, the site uses modern web technologies including Matomo analytics for privacy-conscious tracking, Google Tag Manager, and Facebook Pixel, with a responsive design optimized for mobile devices. Hosting is provided by OVH SAS, a reputable registrar and hosting provider. Security posture is generally good with HTTPS enforced and consent mechanisms for cookies and tracking, although the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is basic, lacking a visible privacy policy or terms of service, which should be addressed to enhance user trust and regulatory adherence. Overall, the site is professional and trustworthy, serving a niche educational market in Poland.

N

news&com S.R.L.

meravigliedicalabria.it

57

Meraviglie di Calabria is a specialized e-commerce and cultural platform dedicated to promoting and selling artisan and regional products from Calabria, Italy. The website is operated by news&com S.R.L., a small-sized company with a strong media presence through its associated publications. The platform offers a curated marketplace featuring jewelry, ceramics, textiles, wines, and liquors, combined with cultural storytelling and news to engage its target audience of consumers passionate about Calabrian heritage. Technically, the website is built on WordPress with WooCommerce and uses modern UI frameworks like Yootheme and Uikit, ensuring a responsive and user-friendly experience. Security measures include SSL encryption, spam protection, and cookie consent mechanisms, although some security headers could be improved. Overall, the site demonstrates a good security posture and compliance with GDPR regulations. The domain registration is consistent with the business identity, enhancing trustworthiness. Strategic recommendations include enhancing security headers, conducting regular vulnerability assessments, and improving accessibility features to further strengthen the platform's reliability and user trust.

B

Bookimed Limited

bookimed.com

67

Bookimed Limited operates an international medical tourism platform facilitating hospital search and treatment arrangements worldwide. The website targets patients seeking verified clinics and doctors abroad, offering extensive patient reviews and treatment options. The platform is well-established with a strong market position in healthcare travel, supported by a medium-sized team and multiple international contact points. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, with integrated analytics and tracking tools for marketing and user behavior analysis. Security posture is strong with HTTPS, security headers, and secure forms, although dedicated security and incident response policies are not publicly found. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving a general audience safely.

K

Kuchyňské studio DAMIO

damio.cz

39

Kuchyňské studio DAMIO is a Czech Republic-based small business specializing in the design, manufacture, and delivery of custom kitchens and interior solutions for residential, commercial, and public spaces. The company operates physical studios in Litomyšl and Pardubice and emphasizes personalized service and quality craftsmanship. Their website showcases a portfolio of completed projects and offers graphic design and visualization services to support client planning. Technically, the website employs modern web technologies including Google Fonts, Leaflet.js for maps, and tracking tools such as Facebook Pixel and Seznam Retargeting. The site is mobile-optimized with good SEO practices and a cookie consent mechanism, reflecting a moderate level of digital maturity. However, no CMS or hosting provider details are evident, and some security headers appear missing. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain transparency and trustworthiness, though the website content and contact information appear professional and legitimate. Overall, the website presents a trustworthy and professional business front with room for improvement in security policy transparency and domain registration clarity. Strategic enhancements in security headers and incident response documentation would strengthen their security posture and compliance stance.

B

BRICKS agency

bricksagency.sk

60

BRICKS agency is a Slovak digital marketing agency specializing in comprehensive marketing solutions including web development, e-commerce, social media management, PPC campaigns, SEO, branding, and print graphics. Established in 2018 and based in Poprad, Slovakia, the agency serves a diverse client base ranging from small to large enterprises. The website demonstrates a strong market position with a professional portfolio and clear service offerings. Technically, the site is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, and integrates SEO and cookie consent tools effectively. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers could be improved. Overall, the site is well-structured, mobile-optimized, and compliant with GDPR requirements. The domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

F

Finance Watch

finance-watch.org

68

Finance Watch is a non-profit association dedicated to reforming finance in the interest of citizens. The website presents a professional and consistent brand image with a clear mission focused on financial reform advocacy. The technical infrastructure is based on WordPress CMS, enhanced with modern SEO and marketing tools such as HubSpot and Google Tag Manager, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit security policies could further strengthen defenses. Privacy compliance is well addressed with clear privacy and cookie policies, reflecting GDPR awareness. Overall, the website is trustworthy and serves its advocacy purpose effectively.

L

Labora 2.0

laboraczech.cz

40

Labora 2.0 is a regional project focused on career development and educational advancement in the Krušnohoří/Erzgebirge region. It aims to enhance the educational structure, prevent graduate migration, and support economic growth through workshops, excursions, and partnerships with schools and local businesses. The website is professionally designed using WordPress and the Divi theme, featuring clear navigation and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and incident response information could improve it. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the site reflects a trustworthy and credible regional initiative with strong partner backing.

S

Systém Jóga v denním životě

joga.cz

42

Systém Jóga v denním životě operates a well-established yoga education platform primarily serving the Czech Republic. The website offers a broad range of authentic yoga courses for various skill levels and demographics, including seniors and those with specific health concerns. The organization maintains a strong market position as a leading yoga course provider in the region, supported by certified instructors and a rich content offering including books and partner projects. Technically, the website is built on Joomla CMS and leverages modern JavaScript libraries and analytics tools, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses common tracking and analytics services but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the domain's long age and consistent WHOIS data support the legitimacy of the business. Strategic recommendations include enhancing privacy compliance, adding security headers, and publishing incident response contacts to strengthen trust and security posture.

P

Pelikan.cz

pelikan.cz

57

Pelikan.cz is a well-established online travel agency primarily serving the Czech Republic and Slovak markets. The company offers a broad range of travel-related services including flight bookings, hotel reservations, travel insurance, car rentals, and holiday packages. With over 3 million satisfied customers and 20 years of experience, Pelikan.cz positions itself as a trusted and comprehensive travel service provider. The website is professionally designed with clear navigation and a focus on user experience, targeting travelers seeking affordable and convenient travel solutions. The business model revolves around aggregating offers from over 800 airlines and travel partners, providing a one-stop platform for travel planning and booking. Technically, the website leverages modern web technologies such as AngularJS, Swiper.js, and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, New Relic, and Exponea. The site is served over HTTPS with service worker support, indicating a commitment to security and performance. Mobile optimization is good, and SEO practices are well implemented, although accessibility features are basic. The site employs a detailed cookie consent mechanism compliant with GDPR, reflecting awareness of privacy regulations. From a security perspective, the site enforces HTTPS and uses several third-party monitoring and analytics services. However, explicit security headers are not detected in the provided data, and no dedicated security or incident response policies are publicly available. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, which slightly impacts trust assessment. No vulnerabilities or exposed sensitive data were identified in the analysis. Overall, Pelikan.cz presents a professional and trustworthy online travel platform with a solid technical foundation and good privacy compliance. The main risks relate to incomplete domain registration transparency and the opportunity to enhance security headers and incident response visibility. Strategic improvements in these areas would strengthen the site's security posture and trustworthiness.

T

The Australian National University

anu.edu.au

68

The Australian National University (ANU) is a leading educational institution in Australia, renowned for its research excellence and comprehensive academic offerings. The website serves a diverse audience including prospective and current students, researchers, and alumni, providing detailed information on study programs, research initiatives, and campus life. ANU maintains a strong market position as a top-tier university with extensive services and affiliations with prominent research alliances. Technically, the website is built on Drupal CMS and leverages modern web technologies including Font Awesome, Google Tag Manager, and OneTrust for consent management. The site is hosted on AWS Cloudfront CDN, ensuring fast performance and excellent mobile optimization. Accessibility and SEO practices are well implemented, contributing to a high-quality user experience. From a security perspective, the website enforces HTTPS and uses consent management tools to comply with privacy regulations. However, it lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerability disclosure or security.txt files were found, indicating room for improvement in transparency and security communication. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on user experience and compliance. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen the security posture and trustworthiness.

S

Spolu pro rodinu, z.s.

spoluprorodinu.cz

41

Spolu pro rodinu, z.s. is a registered non-profit association based in the Czech Republic focused on improving the situation of families through social services, legal protection programs for children, and support for foster care. The organization operates regionally with a clear mission to assist families and institutions that support them. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to their target audience of families and social service beneficiaries. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as Google reCAPTCHA v3 and tracking via Google Analytics and Facebook Pixel. While the site uses HTTPS and asynchronous script loading for performance, it lacks some security headers and explicit privacy and cookie policies, which are important for compliance and user trust. Contact information is primarily a physical address and a contact form, with no direct emails or phone numbers listed. Overall, the website is functional, secure at a basic level, and credible but would benefit from enhanced privacy compliance and security hardening.

A

Adventure Centrum

adventurecentrum.cz

52

Adventure Centrum is a specialized retailer and exclusive importer of outdoor and water sports equipment, focusing on Hobie kayaks with unique MirageDrive technology, SUP paddleboards, solar cooking products, and 12V cooling solutions. The company targets outdoor enthusiasts and hobbyists primarily in the Czech Republic and Slovakia. Their market position is strengthened by exclusive distribution rights and active participation in relevant trade fairs and events. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and formal security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy found. Overall, the website reflects a professional and trustworthy business with room for enhanced compliance and security transparency.

CasusGrill.cz is an e-commerce website operated by Adventure Centrum, the exclusive importer and distributor of the Casus Grill portable ecological grill for the Czech Republic and Slovakia. The business focuses on retailing innovative, environmentally friendly portable grills and related accessories, targeting outdoor enthusiasts and consumers seeking convenient grilling solutions. The website demonstrates a solid market position with exclusive distribution rights and a recognized design award, enhancing its credibility and appeal. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, integrating popular marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized with good SEO practices and includes standard security measures like HTTPS and Google reCAPTCHA on forms. However, there is room for improvement in security headers and explicit security policies. From a security perspective, the site maintains a good posture with encrypted communications and spam protection on forms. No critical vulnerabilities or malicious indicators were found. Privacy compliance is addressed with a cookie consent banner and a privacy policy, though more comprehensive security and incident response policies are absent. Overall, CasusGrill.cz presents a trustworthy, professional online presence with a clear business focus and adequate technical infrastructure. Strategic enhancements in security headers and formal security policies would further strengthen its risk posture and compliance standing.